Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/hHPX2auJTWEFB5oyk4e1xK6tugs.roa
File: hHPX2auJTWEFB5oyk4e1xK6tugs.roa (raw, json)
Hash identifier: BWrF1yK55SnADhFcPKSmYerepi1gClC2AyhlhOGfX9M=
Subject key identifier: 84:73:D7:D9:AB:89:4D:61:05:07:9A:32:93:87:B5:C4:AE:AD:BA:0B
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 018CFCED53E06D28599D7C9E3A40BA6AB091
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/hHPX2auJTWEFB5oyk4e1xK6tugs.roa
Signing time: Fri 12 Jan 2024 09:07:40 +0000
ROA not before: Fri 12 Jan 2024 09:07:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 87.117.68.0/23 maxlen: 23
194.105.134.0/23 maxlen: 24
194.145.242.0/23 maxlen: 24
62.169.148.0/23 maxlen: 23
195.206.172.0/22 maxlen: 24
185.147.184.0/22 maxlen: 22
147.189.214.0/24 maxlen: 24
217.14.184.0/21 maxlen: 21
109.224.226.0/23 maxlen: 24
178.248.128.0/21 maxlen: 21
109.224.234.0/23 maxlen: 24
109.224.240.0/23 maxlen: 24
147.189.156.0/22 maxlen: 24
185.161.4.0/22 maxlen: 22
87.117.64.0/22 maxlen: 22
144.178.104.0/23 maxlen: 23
144.178.118.0/23 maxlen: 23
94.154.184.0/22 maxlen: 24
193.35.146.0/23 maxlen: 23
176.116.116.0/22 maxlen: 22
212.59.72.0/21 maxlen: 24
91.239.57.0/24 maxlen: 24
194.146.160.0/22 maxlen: 24
213.225.224.0/22 maxlen: 24
217.20.244.0/22 maxlen: 24
79.135.122.0/23 maxlen: 24
185.231.136.0/21 maxlen: 21
185.23.254.0/23 maxlen: 24
45.66.36.0/22 maxlen: 22
144.178.252.0/23 maxlen: 23
2a07:5940::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 27 Feb 2024 16:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:ed:53:e0:6d:28:59:9d:7c:9e:3a:40:ba:6a:b0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Jan 12 09:07:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8473d7d9ab894d6105079a329387b5c4aeadba0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:1f:e7:fc:14:70:0f:da:6c:b0:fb:57:39:
dc:5a:2b:be:ea:5e:28:ca:6d:ec:b4:83:e0:9e:e8:
bf:b1:6a:b2:55:55:d0:31:2d:92:82:75:91:d9:6b:
50:90:02:21:c4:af:e8:a9:b4:96:22:12:03:a2:9c:
e5:97:8c:12:fb:33:62:ff:ba:38:e7:b1:d8:01:bb:
39:72:9c:e5:4e:a4:b8:c6:5d:4f:2d:78:39:57:8f:
ea:c2:93:f8:6c:dc:0b:78:8f:d9:f7:1c:33:bc:a8:
eb:b2:df:99:e2:65:37:73:90:16:6b:f6:58:0d:1d:
fc:09:27:fc:99:6e:37:67:e8:8d:77:b3:c1:02:65:
31:5a:76:21:af:63:82:38:85:3c:c9:83:c5:89:9a:
67:86:00:ff:75:69:fe:00:d9:76:fd:e6:9a:74:f9:
6f:e7:f7:a2:c7:9d:1f:05:0e:a8:13:b2:24:a7:5a:
63:0a:d2:35:41:41:a5:f8:eb:f9:e8:54:82:be:bd:
88:ac:4a:48:a0:99:07:23:c7:a9:d5:04:5c:13:3c:
62:f4:72:97:9d:cb:c0:bd:f7:e1:ac:8b:bf:23:54:
22:64:c0:25:2d:e0:f9:31:2f:98:fe:3c:ad:f7:5c:
4c:c8:0d:d0:6c:a7:d6:20:f8:6c:62:82:a4:d6:bb:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:D7:D9:AB:89:4D:61:05:07:9A:32:93:87:B5:C4:AE:AD:BA:0B
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/hHPX2auJTWEFB5oyk4e1xK6tugs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.36.0/22
62.169.148.0/23
79.135.122.0/23
87.117.64.0-87.117.69.255
91.239.57.0/24
94.154.184.0/22
109.224.226.0/23
109.224.234.0/23
109.224.240.0/23
144.178.104.0/23
144.178.118.0/23
144.178.252.0/23
147.189.156.0/22
147.189.214.0/24
176.116.116.0/22
178.248.128.0/21
185.23.254.0/23
185.147.184.0/22
185.161.4.0/22
185.231.136.0/21
193.35.146.0/23
194.105.134.0/23
194.145.242.0/23
194.146.160.0/22
195.206.172.0/22
212.59.72.0/21
213.225.224.0/22
217.14.184.0/21
217.20.244.0/22
IPv6:
2a07:5940::/32
Signature Algorithm: sha256WithRSAEncryption
5c:9d:58:cc:6d:1c:70:a2:3a:c6:99:37:a0:7e:b5:3d:38:86:
1c:39:62:65:5a:e6:3b:f4:47:ae:16:5c:c3:ef:9b:fa:17:63:
45:ec:ae:fb:24:a6:29:cb:21:ac:14:c3:ed:1c:1d:58:11:2c:
3d:8a:d4:d2:fb:55:6d:c8:e7:1d:d7:98:f1:ca:b9:8f:6f:94:
62:31:8e:74:76:f5:35:29:76:ed:01:3c:4d:36:f3:94:2f:62:
4c:80:1e:79:e2:ea:35:72:22:7a:3a:28:70:01:14:62:cb:62:
b6:07:5b:e9:30:65:8d:08:d6:a4:41:40:99:b7:eb:10:7d:24:
71:c1:4a:29:25:96:77:66:c5:0d:fd:27:1b:1f:f0:c0:32:c3:
51:d4:4b:7e:f7:92:0f:95:75:90:30:98:e1:df:13:0b:02:79:
5b:07:14:f2:59:c5:2d:65:15:02:9c:29:45:b8:41:f3:b1:87:
b7:bd:ee:51:6a:16:95:13:bd:4e:02:e9:b3:d0:a9:ec:25:85:
f2:2e:84:a6:20:68:45:55:0a:9c:fe:ec:e0:9c:54:b4:93:9b:
90:92:50:c2:cd:cc:e6:00:c9:fa:d2:88:5a:2b:af:58:2d:e7:
a4:45:d1:cb:22:3c:6c:26:6c:88:db:56:97:9c:67:18:6a:9e:
56:6d:2c:71
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAYz87VPgbShZnXyeOkC6arCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl
OTcyNGUwHhcNMjQwMTEyMDkwNzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDczZDdkOWFiODk0ZDYxMDUwNzlhMzI5Mzg3YjVjNGFlYWRiYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQgf5/wUcA/abLD7VzncWiu+6l4o
ym3stIPgnui/sWqyVVXQMS2SgnWR2WtQkAIhxK/oqbSWIhIDopzll4wS+zNi/7o4
57HYAbs5cpzlTqS4xl1PLXg5V4/qwpP4bNwLeI/Z9xwzvKjrst+Z4mU3c5AWa/ZY
DR38CSf8mW43Z+iNd7PBAmUxWnYhr2OCOIU8yYPFiZpnhgD/dWn+ANl2/eaadPlv
5/eix50fBQ6oE7Ikp1pjCtI1QUGl+Ov56FSCvr2IrEpIoJkHI8ep1QRcEzxi9HKX
ncvAvffhrIu/I1QiZMAlLeD5MS+Y/jyt91xMyA3QbKfWIPhsYoKk1rsUbQIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFIRz19mriU1hBQeaMpOHtcSurboLMB8GA1UdIwQY
MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt
N2Q0MjY2Y2Y4MjJhLzEvaEhQWDJhdUpUV0VGQjVveWs0ZTF4SzZ0dWdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh
LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHiBggrBgEFBQcBBwEB/wSB0jCBzzCBvQQCAAEwgbYDBAIt
QiQDBAE+qZQDBAFPh3owDAMEBld1QAMEAVd1RAMEAFvvOQMEAl6auAMEAW3g4gME
AW3g6gMEAW3g8AMEAZCyaAMEAZCydgMEAZCy/AMEApO9nAMEAJO91gMEArB0dAME
A7L4gAMEAbkX/gMEArmTuAMEArmhBAMEA7nniAMEAcEjkgMEAcJphgMEAcKR8gME
AsKSoAMEAsPOrAMEA9Q7SAMEAtXh4AMEA9kOuAMEAtkU9DANBAIAAjAHAwUAKgdZ
QDANBgkqhkiG9w0BAQsFAAOCAQEAXJ1YzG0ccKI6xpk3oH61PTiGHDliZVrmO/RH
rhZcw++b+hdjReyu+ySmKcshrBTD7RwdWBEsPYrU0vtVbcjnHdeY8cq5j2+UYjGO
dHb1NSl27QE8TTbzlC9iTIAeeeLqNXIiejoocAEUYstitgdb6TBljQjWpEFAmbfr
EH0kccFKKSWWd2bFDf0nGx/wwDLDUdRLfveSD5V1kDCY4d8TCwJ5WwcU8lnFLWUV
ApwpRbhB87GHt73uUWoWlRO9TgLps9Cp7CWF8i6EpiBoRVUKnP7s4JxUtJObkJJQ
ws3M5gDJ+tKIWiuvWC3npEXRyyI8bCZsiNtWl5xnGGqeVm0scQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:19 2025 by rpki-client